https://overkazaf.github.io/blogs/tags/widevine/Recent content in Widevine on +5 Security ResearchHugozh-cnSat, 09 May 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/arm-trustzone-el0-to-el3-attack-chain-anatomy/Sat, 09 May 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/arm-trustzone-el0-to-el3-attack-chain-anatomy/以 Quarkslab/Project Zero/360 Alpha Lab 的四条真实攻击链为案例，从 ARM 异常等级架构出发，逐层解剖 EL0→S-EL0→S-EL1→EL3 的提权技术：共享内存机制、SMC 调用约定、Trustlet 漏洞模式、TEE 内核提权、Secure Monitor 劫持，以及 Boot Chain 替代路径https://overkazaf.github.io/blogs/posts/quarkslab-drm-whitebox-cryptanalysis-arsenal/Fri, 08 May 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/quarkslab-drm-whitebox-cryptanalysis-arsenal/系统梳理法国安全团队 Quarkslab 在白盒密码破译与 DRM 安全研究领域的十年技术演进：从 CHES 2016 最佳论文到 SideChannelMarvels 开源武器库，从 Samsung TrustZone EL3 代码执行到 DarkPhoenix/BlueGalaxyEnergy 新一代工具链https://overkazaf.github.io/blogs/posts/chrome-cdm-stream-dump-widevine-vtable-hook/Mon, 04 May 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/chrome-cdm-stream-dump-widevine-vtable-hook/在 Chrome Linux Widevine CDM 4.10.2934 上尝试 13 种密钥提取方法全部失败后，通过 LD_PRELOAD vtable hook 实现解密后视频流捕获的完整工程记录https://overkazaf.github.io/blogs/posts/widevine-l3-keybox-mass-production/Wed, 29 Apr 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/widevine-l3-keybox-mass-production/通过差分故障攻击(DFA)提取Widevine L3白盒AES密钥，实现keybox离线量产的完整逆向工程记录